Volerion logoVolerion
Volerion logoVolerion

GLPI Stored Cross-Site Scripting Vulnerability in Project Kanban

Vulnerability

A stored cross-site scripting vulnerability has been identified in GLPI versions 9.5.0 through 10.0.18. This issue allows a technician to use a malicious payload that is executed later when the kanban is viewed. The vulnerability has been patched in version 10.0.19.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the kanban.

Remediation

Users can upgrade to GLPI version 10.0.19 to address this vulnerability.

Added: Jul 29, 2025, 7:00 PM
Updated: Jul 29, 2025, 7:00 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
1.7
exploitability
5.2
remediation
7.7
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.